Brocade® DCX, DCX 8510-8, DCX-4S and DCX 8510-4 Backbones ...

iii)
Critical Functions Tests:
(1) RSA 2048 Encrypt/Decrypt KAT
b) Conditional Self-Tests:
i) Continuous Random Number Generator (RNG) test – performed on non-approved RNG.
ii)
iii)
iv)
Continuous Random Number Generator test – performed on ANSI X9.31 DRNG.
RSA 1024/2048 SHA-1 Pairwise Consistency Test (Sign/Verify)
RSA 1024/2048 Pairwise Consistency Test (Encrypt/Decrypt)
v) Firmware Load Test (RSA 1024 SHA-1 Signature Verification
vi)
Bypass Test: N/A
vii) Manual Key Entry Test: N/A
4) At any time the cryptographic module is in an idle state, the operator shall be capable of commanding
the module to perform the power-up self-test.
5) Data output shall be inhibited during key generation, self-tests, zeroization, and error states.
6) Status information shall not contain CSPs or sensitive data that if misused could lead to a compromise
of the module.
7) The module does not support a maintenance role or maintenance interface.
9. Physical Security Policy
Physical Security Mechanisms
The multi-chip standalone cryptographic module includes the following physical security mechanisms:
Production-grade components and production-grade opaque enclosure with tamper evident seals.
Tamper evident seals.
Operator Required Actions
The operator is required to inspect the tamper evident seals, periodically, per the guidance provided in the user
documentation.
Physical Security Mechanisms
Recommended Frequency of
Inspection/Test
Inspection/Test Guidance Details
Tamper Evident Seals 12 months Reference Appendix A for a
description of tamper label
application for all evaluated
platforms.
Table 16 Inspection/Testing of Physical Security Mechanisms
10. Mitigation of Other Attacks Policy
The module has not been designed to mitigate any specific attacks beyond the scope of FIPS 140-2
requirements.
Brocade Communications FOS 7.0.0b or FOS 7.0.0b1 DCX Security Policy v2.0 20